CVE-2014-2079 X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba an...
MediumCVSS 5.5
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xfe(Debian:12) | < 1.37-2 | 1.37-2 |
| debian/xfe(Debian:13) | < 1.37-2 | 1.37-2 |
| debian/xfe(Debian:14) | < 1.37-2 | 1.37-2 |
| x file explorer project x file explorer | = 1.32.5 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-2079 vendor-advisory
- [oss-security] 20140224 Re: xfe: directory masks ignored when creating new files on Samba and NFS mailing-list third-party-advisory
- 65748 third-party-advisory vdb-entry
- bugs.debian.org mailing-list patch third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- xfile-explorer-cve20142079-sec-bypass(91519) third-party-advisory vdb-entry
- bugs.debian.org issue-tracking